Add JSON request data validity check

hel-repo · Nov 23, 2016 · a28915d · a28915d
1 parent b0f69f0
commit a28915d
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/hel/views.py b/hel/views.py
@@ -164,6 +164,10 @@ def auth(request):
              context=Package,
              permission='pkg_update')
 def update_package(context, request):
+    try:
+        params = request.json_body
+    except:
+        raise HTTPBadRequest(detail=Messages.bad_request)
     query = {}
     old = replace_chars_in_keys(
         context.retrieve(), Constants.key_replace_char, '.')
@@ -391,6 +395,10 @@ def delete_package(context, request):
              context=Packages,
              permission='pkg_create')
 def create_package(context, request):
+    try:
+        params = request.json_body
+    except:
+        raise HTTPBadRequest(detail=Messages.bad_request)
     try:
         data = copy.deepcopy(request.json_body)
         if 'owners' not in data:
@@ -452,6 +460,10 @@ def list_packages(context, request):
              context=User,
              permission='user_update')
 def update_user(context, request):
+    try:
+        params = request.json_body
+    except:
+        raise HTTPBadRequest(detail=Messages.bad_request)
     query = {}
     old = context.retrieve()
     for k, v in request.json_body.items():